How To Install Certificate Authority On Windows Server 2012 R2

Hi all, today lets become through another services that Windows Server 2012 tin can provide for your infrastructure, which is Document Say-so (CA).

** in my adjacent post, i will post step by step on Network Admission Protection, so this Certificate Authority is 1 of the requirement that you need before you proceed with Network Access Protection.**

"A certification authority (CA) is responsible for attesting to the identity of users, computers, and organizations.

The CA authenticates an entity and vouches for that identity by issuing a digitally signed certificate.

The CA can likewise manage, revoke, and renew certificates.

A certification say-so tin can refer to following:

An organization that vouches for the identity of an end user
A server that is used past the organization to issue and manage certificates"

More information please log in to : http://technet.microsoft.com/en-us/library/hh831574.aspx

Lets go started…

1 – On the domain Server (OSI-ADDS01), open Server Manager and go through to Select Server Roles and click Active Directory Certificate Services and so click Next…

2 – In theSelect Features interface, proceed with Next…

iii – In the Active Directory Certificates Services interface, click Adjacent…

four – In the Select role services, make sure you tick Certificate Authorization and Certification Potency Web Enrollment check box and then click Next…

v – In the Web Server Role (IIS) interface, click Side by side to proceed…

6 – in the Select role services, simply click Next to proceed…

7 – in the installation selections interface, click Install…

8 – Later on installation complete, in the Installation progress interface, click Configure Active Directory Document Services on the destination server…

9 – Side by side, in the Credentials interface, verify that your Credentials is Administrator and then click Next…

10 – In the Office Services interface, tick Certification Authority and Certification Authority Spider web Enrollment and then click Adjacent…

xi – In the Setup Type interface, verify that Enterprise CA is selected and click Next…

12 – In the CA Type interface, verify that Root CA is selected then click Next…

13 – Side by side in the Private Key interface, click Create a new individual key and then click Adjacent…

fourteen – In the Cryptography for CA interface, you tin remain the default setting which RSA Cryptography with 2048 key length and verify that SHA1 is selected, and so click Adjacent…

15 – Next in the CA Proper name interface, just go along with Next…

sixteen – In the Validity Period, i choose 3 years for my CA, default should be 5 years but its all depend on your organization security policy, and and so click Next…

17 – In the CA Database interface, just click Next to keep…

18 – Next in the Confirmation interface, verify again all the settings and and so click Configure…

19 – delight wait few minutes for the configuration to consummate…

twenty – Finally, our CA & CA Spider web Enrollment successfully installed and later in my next blog, i will go on with Installing & Configuring Network Admission Protection which is require us to accept this CA…